$ rpki-client -vvf rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft File: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft (raw, json) Hash identifier: 8ReeM2tCMHjh4+1Gfff9iyFMJx1S5fEm1x9m1avv8rk= Subject key identifier: B2:E5:F5:33:F8:76:90:34:18:F6:00:8C:34:AD:B0:6A:CF:53:06:05 Authority key identifier: 9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C Certificate issuer: /CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Certificate serial: 4E6194EE37FF4E8FC16B3D7E96157D130A9F8BB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:45:47 +0000 Manifest this update: Tue 02 Jun 2026 12:40:47 +0000 Manifest next update: Wed 03 Jun 2026 13:57:47 +0000 Files and hashes: 1: 9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl (hash: qFhBXrHttBjll9jm2s9M5WLfYlFB7hn00E+S1+L01I8=) 2: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 7xqE0F9v+EXRL9dCkePN1NHTFDTfqFm2QwKgbcBy4ao=) 3: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: OPLg91e3QDUz0oxlHDtfye2YYgsL8tJKKqHtqB32VO0=) 4: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: /Ar9BLD37pzpWiMramvnEnpVLlVnDEgU4xEdcB/AMOA=) 5: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: w0+5fhmaBdxaqda6UhvTmcPuYEdSCtqjLZVClfvW/98=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:61:94:ee:37:ff:4e:8f:c1:6b:3d:7e:96:15:7d:13:0a:9f:8b:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C Validity Not Before: Jun 2 12:40:47 2026 GMT Not After : Jun 3 13:57:47 2026 GMT Subject: CN=B2E5F533F876903418F6008C34ADB06ACF530605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:7a:37:e1:89:9b:66:aa:41:0a:52:f9:e4: b5:9e:69:80:e6:93:d4:92:89:a6:2f:3d:b6:b9:7c: b2:8c:96:21:cf:fa:c3:e0:12:5e:e5:ee:29:36:4b: 9e:4d:ec:5d:aa:97:9d:20:8e:7b:25:1e:46:01:b4: 01:b9:bb:07:ef:2e:15:27:a1:95:6c:38:14:09:1d: 89:b0:97:8b:0b:4d:23:a4:c3:9f:fd:d8:29:56:d0: 04:9c:5b:50:9b:44:0f:e7:ca:69:cb:51:19:c1:0d: 20:55:cb:5a:40:86:7f:28:1a:d3:51:02:95:86:19: f7:f1:35:a9:ab:9c:04:01:b6:22:cf:25:15:96:ff: fc:78:90:49:ff:8c:47:87:c6:93:10:2e:e4:cb:0d: da:df:58:c6:31:df:8f:0e:ae:2c:dd:6c:89:c6:42: 40:c2:b7:71:06:86:9c:10:52:b3:e0:2e:f3:8f:76: 39:ee:1d:8c:4f:82:49:a7:36:e9:f6:49:60:cf:ab: 89:95:c9:7c:b3:f2:8f:22:b9:fd:bc:51:83:a9:ab: 12:9e:2d:d3:c5:26:d7:89:23:2b:40:46:4e:75:68: 0c:9b:d4:f7:fc:f2:80:5f:e1:59:89:92:7c:43:9e: 46:40:bf:5c:ab:be:3f:a1:fe:b1:3b:2d:3f:b1:53: 6a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E5:F5:33:F8:76:90:34:18:F6:00:8C:34:AD:B0:6A:CF:53:06:05 X509v3 Authority Key Identifier: keyid:9D:FC:7A:51:49:D3:FC:C0:AC:D9:BB:ED:55:C4:CE:8E:A8:2A:03:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/9DFC7A5149D3FCC0ACD9BBED55C4CE8EA82A038C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c6:2a:50:6e:69:c5:b3:e9:77:0b:ca:d3:41:21:05:ba:a6: 33:35:ee:30:bd:43:18:3d:7f:26:6c:f7:1d:d9:2b:80:b1:71: c9:ae:1b:e3:d7:2f:89:39:8d:cb:62:2f:51:7b:8b:cc:81:46: 9a:5c:fd:a9:cb:83:35:14:0e:5b:74:c8:d8:87:91:3e:5d:9a: 38:f8:c5:56:98:91:15:27:2d:d1:0d:f0:4f:d1:63:e9:91:41: 58:2a:e1:61:4a:a2:1f:5c:bf:19:bb:8c:b3:b3:03:10:5d:62: ab:ae:86:98:2c:09:14:c8:55:4c:26:81:97:37:80:83:a4:29: a7:2d:80:e4:c8:15:cc:1e:d0:bb:35:97:fe:b0:58:fa:3b:78: 08:f4:a7:ed:88:d0:ec:f0:2c:d2:5c:d2:de:03:3e:72:1d:6e: ab:a6:d8:1f:1d:99:2a:c6:53:fb:01:ee:40:3f:80:11:61:28: 58:33:26:71:2c:f6:be:16:25:b3:b1:e3:2f:c0:ba:a3:56:dc: 6d:92:bb:18:16:0e:2e:54:3c:98:71:d1:55:d8:4e:54:15:bf: a3:fd:44:88:ce:dc:fa:03:9b:43:5a:9d:2d:44:47:10:a9:0d: 37:77:80:f7:41:db:af:de:9d:05:b1:95:14:75:bc:07:ce:e0: 5b:9c:a0:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmGU7jf/To/Baz1+lhV9Ewqfi7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENFOEVB ODJBMDM4QzAeFw0yNjA2MDIxMjQwNDdaFw0yNjA2MDMxMzU3NDdaMDMxMTAvBgNV BAMTKEIyRTVGNTMzRjg3NjkwMzQxOEY2MDA4QzM0QURCMDZBQ0Y1MzA2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF6Xo34YmbZqpBClL55LWeaYDm k9SSiaYvPba5fLKMliHP+sPgEl7l7ik2S55N7F2ql50gjnslHkYBtAG5uwfvLhUn oZVsOBQJHYmwl4sLTSOkw5/92ClW0AScW1CbRA/nymnLURnBDSBVy1pAhn8oGtNR ApWGGffxNamrnAQBtiLPJRWW//x4kEn/jEeHxpMQLuTLDdrfWMYx348OrizdbInG QkDCt3EGhpwQUrPgLvOPdjnuHYxPgkmnNun2SWDPq4mVyXyz8o8iuf28UYOpqxKe LdPFJteJIytARk51aAyb1Pf88oBf4VmJknxDnkZAv1yrvj+h/rE7LT+xU2rxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsuX1M/h2kDQY9gCMNK2was9TBgUwHwYDVR0j BBgwFoAUnfx6UUnT/MCs2bvtVcTOjqgqA4wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg0NmY0MjItYzMwMi00NDYyLWI1ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0 OUQzRkNDMEFDRDlCQkVENTVDNENFOEVBODJBMDM4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85REZDN0E1MTQ5RDNGQ0MwQUNEOUJCRUQ1NUM0Q0U4RUE4MkEw MzhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvOURGQzdBNTE0OUQzRkNDMEFDRDlCQkVENTVDNENF OEVBODJBMDM4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbGKlBuacWz6XcLytNBIQW6pjM17jC9Qxg9 fyZs9x3ZK4CxccmuG+PXL4k5jctiL1F7i8yBRppc/anLgzUUDlt0yNiHkT5dmjj4 xVaYkRUnLdEN8E/RY+mRQVgq4WFKoh9cvxm7jLOzAxBdYquuhpgsCRTIVUwmgZc3 gIOkKactgOTIFcwe0Ls1l/6wWPo7eAj0p+2I0OzwLNJc0t4DPnIdbqum2B8dmSrG U/sB7kA/gBFhKFgzJnEs9r4WJbOx4y/AuqNW3G2SuxgWDi5UPJhx0VXYTlQVv6P9 RIjO3PoDm0NanS1ERxCpDTd3gPdB26/enQWxlRR1vAfO4FucoHs= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:57 2026 by rpki-client